CVE-2017-7290

SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitrary SQL commands via…

published March 30, 2017

CVSS
—
EPSS
2%
Percentile
83.1
In the wild
Unconfirmed
What it is

SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitrary SQL commands via the url parameter to findusers.php. An example attack uses "into outfile" to create a backdoor program.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02299 · 83.1th percentile
Published
2017-03-30T07:00Z
EPSS history
Timeline
  • 30 MAR 07:00Z
    SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitrary SQL commands via…
    cvelistv5